Android.MobiDash.974

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.MobiDash.2.origin

Network activity:

Connecting to:

UDP(DNS) <Google DNS>
TCP(HTTP/1.1) api.the####.com:80
TCP(HTTP/1.1) m####.space:80
TCP(HTTP/1.1) www.i####.com:80
TCP(HTTP/1.1) ip####.com:80
TCP(HTTP/1.1) ads.m####.com:80
TCP(HTTP/1.1) www.omd####.com:80
TCP(HTTP/1.1) www.the####.com:80
TCP(TLS/1.0) api.the####.com:443
TCP(TLS/1.0) www.the####.com:443
TCP(TLS/1.0) api.themov####.org:443
TCP(TLS/1.0) api.t####.tv:443
TCP(TLS/1.0) mobilep####.pass####.ya####.net:443
TCP(TLS/1.0) sta####.mo####.ya####.net:443
TCP(TLS/1.0) e.crashly####.com:443
TCP(TLS/1.0) am.appserv####.com:443
TCP(TLS/1.0) i####.t####.org:443
TCP(TLS/1.0) re####.appmet####.ya####.net:443
TCP(TLS/1.0) ssl.google-####.com:443
TCP(TLS/1.0) d####.aer####.com:443
TCP(TLS/1.0) b####.nitrox####.com:443
TCP(TLS/1.0) api.oneaudi####.com:443
TCP(TLS/1.0) raw.githubu####.com:443
TCP(TLS/1.0) sett####.crashly####.com:443
TCP(TLS/1.0) 1####.194.69.113:443
TCP(TLS/1.0) ads.aer####.com:443

DNS requests:

ads.aer####.com
ads.m####.com
am.appserv####.com
api.oneaudi####.com
api.t####.tv
api.the####.com
api.themov####.org
b####.nitrox####.com
certifi####.mo####.ya####.net
d####.aer####.com
e.crashly####.com
i####.t####.org
in.appserv####.com
ip####.com
m####.space
raw.githubu####.com
re####.appmet####.ya####.net
sett####.crashly####.com
ssl.google-####.com
sta####.mo####.ya####.net
the####.com
www.i####.com
www.omd####.com
www.the####.com

HTTP GET requests:

ads.m####.com/m/ad?android_perms_ext_storage=####&av=####&bundle=####&cn...
ads.m####.com/m/ad?assets=####&av=####&bundle=####&cn=####&cppck=####&ct...
ads.m####.com/m/ad?id=####&nsv=####&dn=####&bundle=####&z=####&o=####&w=...
ads.m####.com/m/ad?v=####&id=####&nv=####&dn=####&bundle=####&z=####&o=#...
api.the####.com/banners/posters/247897-15.jpg
api.the####.com/banners/posters/279536-2.jpg
api.the####.com/banners/posters/290853-8.jpg
ip####.com/json
www.i####.com/title/tt5232792/episodes
www.omd####.com/?i=####&type=####&tomatoes=####&apikey=####
www.the####.com/banners/posters/257655-8.jpg
www.the####.com/banners/posters/263365-3.jpg
www.the####.com/banners/posters/274431-26.jpg
www.the####.com/banners/posters/281622-1.jpg
www.the####.com/banners/posters/295685-2.jpg
www.the####.com/banners/posters/71663-10.jpg
www.the####.com/banners/posters/78901-35.jpg
www.the####.com/banners/posters/80379-18.jpg

HTTP POST requests:

m####.space/

Modified file system:

Creates the following files:

/data/anr/traces.txt
/data/data/####/001c03533624295266bfaf72d5b5ed2a.0.tmp
/data/data/####/001c03533624295266bfaf72d5b5ed2a.1.tmp
/data/data/####/0196f2e4928ab7fcda98f498172d794c.0.tmp
/data/data/####/0196f2e4928ab7fcda98f498172d794c.1.tmp
/data/data/####/041119330f128315884aec41fe5bc180f80a052e21d3c69....0.tmp
/data/data/####/041de33778571f82c8dcbca4b80c03e9.0.tmp
/data/data/####/041de33778571f82c8dcbca4b80c03e9.1.tmp
/data/data/####/048711cdd004d75a179d3d011aa81202.0.tmp
/data/data/####/048711cdd004d75a179d3d011aa81202.1.tmp
/data/data/####/04f1ffebb8fc045628b3d1af1e12ab61.0.tmp
/data/data/####/04f1ffebb8fc045628b3d1af1e12ab61.1.tmp
/data/data/####/064a6c22de2b5177e31d18c85e6d296d.0.tmp
/data/data/####/064a6c22de2b5177e31d18c85e6d296d.1
/data/data/####/085df7ae416dc9a9fb1bbe525dc5d46a.0.tmp
/data/data/####/085df7ae416dc9a9fb1bbe525dc5d46a.1.tmp
/data/data/####/0941401996bd0f39beb1518ab511908c.0.tmp
/data/data/####/0941401996bd0f39beb1518ab511908c.1.tmp
/data/data/####/0b9e514e170b3f4a946db0a530da6ab4.0.tmp
/data/data/####/0b9e514e170b3f4a946db0a530da6ab4.1.tmp
/data/data/####/0eb5aa63a2e056fb5c0f7811f52cd53d.0.tmp
/data/data/####/0eb5aa63a2e056fb5c0f7811f52cd53d.1.tmp
/data/data/####/0f87075b83e0e1b8e98f8a3ba56014dd46ab9fa3d3efff2....0.tmp
/data/data/####/12d0fa7043b5c9e4d2ade77cfcb7eaa7.0.tmp
/data/data/####/12d0fa7043b5c9e4d2ade77cfcb7eaa7.1.tmp
/data/data/####/13372305d509ecb3f6679bb4bc170190baa6739e2fdb776....0.tmp
/data/data/####/15ffb9eeabef738f84fdecdc4dbf75aa.0.tmp
/data/data/####/15ffb9eeabef738f84fdecdc4dbf75aa.1.tmp
/data/data/####/162da7efa17b35bb465cbf5986ccd7b5.0.tmp
/data/data/####/162da7efa17b35bb465cbf5986ccd7b5.1.tmp
/data/data/####/19a517de776d9dc342f58e9893fa6aa8bfe914a1f83b868....0.tmp
/data/data/####/19b80acb5aed413c4bd621e1fc1150ea.0.tmp
/data/data/####/19b80acb5aed413c4bd621e1fc1150ea.1.tmp
/data/data/####/1bc5309254dfd1f92d1aac6923bde076.0.tmp
/data/data/####/1bc5309254dfd1f92d1aac6923bde076.1.tmp
/data/data/####/1cc328336b3dc522018bf77c1945d9c8.0.tmp
/data/data/####/1cc328336b3dc522018bf77c1945d9c8.1.tmp
/data/data/####/1ee80c7ae51bf7d660af9f89b212adc2.0.tmp
/data/data/####/1ee80c7ae51bf7d660af9f89b212adc2.1.tmp
/data/data/####/20b3b978215100127f17adb21fd2e1cc227fae64c85b28b....0.tmp
/data/data/####/227bfad69dd6568b9f0053c65b93adf6091b6e411fb5680....0.tmp
/data/data/####/230201f0a1c976234883b05f69fe2b68.0.tmp
/data/data/####/230201f0a1c976234883b05f69fe2b68.1.tmp
/data/data/####/254dfcb70cf1eb3dc383bb905691ba9a.0.tmp
/data/data/####/254dfcb70cf1eb3dc383bb905691ba9a.1.tmp
/data/data/####/2578fc53db16dddac0b384ac9be86535.0.tmp
/data/data/####/2578fc53db16dddac0b384ac9be86535.1.tmp
/data/data/####/29289439432d6c7cad3d1eb36f3ea49a.0.tmp
/data/data/####/29289439432d6c7cad3d1eb36f3ea49a.1.tmp
/data/data/####/2ab393cc2ed1a03f8f737a77197dec6d.0.tmp
/data/data/####/2ab393cc2ed1a03f8f737a77197dec6d.1.tmp
/data/data/####/35df18302553cb61eb24205f221e20ac.0.tmp
/data/data/####/35df18302553cb61eb24205f221e20ac.1.tmp
/data/data/####/3c062f24f85e557972588df836833451.0.tmp
/data/data/####/3c062f24f85e557972588df836833451.1.tmp
/data/data/####/3f668863c9011a9329154af7db9c5b3a.0.tmp
/data/data/####/3f668863c9011a9329154af7db9c5b3a.1.tmp
/data/data/####/40a6131714a14432bcf9e0e6c6f6bae0.0.tmp
/data/data/####/40a6131714a14432bcf9e0e6c6f6bae0.1.tmp
/data/data/####/416b3b126d7224c2885bd48f51660066.0.tmp
/data/data/####/416b3b126d7224c2885bd48f51660066.1.tmp
/data/data/####/449f32331e6bf414a55156c3d398d043.0.tmp
/data/data/####/449f32331e6bf414a55156c3d398d043.1.tmp
/data/data/####/45c3d435bfaa6db6669bfceda0f64256.0.tmp
/data/data/####/45c3d435bfaa6db6669bfceda0f64256.1.tmp
/data/data/####/472722af26208d2bda57f6d261f946e1.0.tmp
/data/data/####/472722af26208d2bda57f6d261f946e1.1.tmp
/data/data/####/47eb85bafebec57cec9ad1a795c087ee6d50798959cda69....0.tmp
/data/data/####/4aa3de241db9b8c392b9fa4fff5aba3116b00f7287ea75c....0.tmp
/data/data/####/508878907eded7899a1cf54fcc362535.0.tmp
/data/data/####/508878907eded7899a1cf54fcc362535.1.tmp
/data/data/####/560c70732595bf4bdec3c5f6cf2bad93.0.tmp
/data/data/####/560c70732595bf4bdec3c5f6cf2bad93.1.tmp
/data/data/####/5618dab9d4ef972b1ef36818d5af9d73.0.tmp
/data/data/####/5618dab9d4ef972b1ef36818d5af9d73.1.tmp
/data/data/####/578056a98c511be52fe00bf9974400d8.0.tmp
/data/data/####/578056a98c511be52fe00bf9974400d8.1.tmp
/data/data/####/580175d31b8b773fa8b1aa65446fdb1a31a02cfdc279f3c....0.tmp
/data/data/####/596bf691fcec51d2ea973d7a8c70470999b91c033e12bf0....0.tmp
/data/data/####/5AD4F23F0288-0001-0815-DD01D19F507ABeginSession.cls_temp
/data/data/####/5AD4F23F0288-0001-0815-DD01D19F507ABeginSession.json
/data/data/####/5AD4F23F0288-0001-0815-DD01D19F507ASessionApp.cls_temp
/data/data/####/5AD4F23F0288-0001-0815-DD01D19F507ASessionApp.json
/data/data/####/5AD4F23F0288-0001-0815-DD01D19F507ASessionDevice.cls_temp
/data/data/####/5AD4F23F0288-0001-0815-DD01D19F507ASessionDevice.json
/data/data/####/5AD4F23F0288-0001-0815-DD01D19F507ASessionOS.cls_temp
/data/data/####/5AD4F23F0288-0001-0815-DD01D19F507ASessionOS.json
/data/data/####/5AD4F23F0288-0001-0815-DD01D19F507ASessionUser.cls_temp
/data/data/####/5AD4F243003B-0001-0896-DD01D19F507ABeginSession.cls_temp
/data/data/####/5AD4F243003B-0001-0896-DD01D19F507ABeginSession.json
/data/data/####/5AD4F243003B-0001-0896-DD01D19F507ASessionApp.cls_temp
/data/data/####/5AD4F243003B-0001-0896-DD01D19F507ASessionApp.json
/data/data/####/5AD4F243003B-0001-0896-DD01D19F507ASessionDevice.cls_temp
/data/data/####/5AD4F243003B-0001-0896-DD01D19F507ASessionDevice.json
/data/data/####/5AD4F243003B-0001-0896-DD01D19F507ASessionOS.cls_temp
/data/data/####/5AD4F243003B-0001-0896-DD01D19F507ASessionOS.json
/data/data/####/5AD4F243003B-0001-0896-DD01D19F507ASessionUser.cls_temp
/data/data/####/5AD4F2460284-0001-08D8-DD01D19F507ABeginSession.cls_temp
/data/data/####/5AD4F2460284-0001-08D8-DD01D19F507ABeginSession.json
/data/data/####/5AD4F2460284-0001-08D8-DD01D19F507ASessionApp.cls_temp
/data/data/####/5AD4F2460284-0001-08D8-DD01D19F507ASessionApp.json
/data/data/####/5AD4F2460284-0001-08D8-DD01D19F507ASessionDevice.cls_temp
/data/data/####/5AD4F2460284-0001-08D8-DD01D19F507ASessionDevice.json
/data/data/####/5AD4F2460284-0001-08D8-DD01D19F507ASessionOS.cls_temp
/data/data/####/5AD4F2460284-0001-08D8-DD01D19F507ASessionOS.json
/data/data/####/5d0dd7e9a8db2894b74bd2843f86bf66.0.tmp
/data/data/####/5d0dd7e9a8db2894b74bd2843f86bf66.1.tmp
/data/data/####/5e1c3c0f11c67676710a4985416a42ad2a077d163ea364b....0.tmp
/data/data/####/5fdbcaa88e46c359c6f63656c6ec1e48.0.tmp
/data/data/####/5fdbcaa88e46c359c6f63656c6ec1e48.1.tmp
/data/data/####/635cce4af1baf894647e4dbdcea5505c.0.tmp
/data/data/####/635cce4af1baf894647e4dbdcea5505c.1.tmp
/data/data/####/64e3d0a1ebfead443f863871f99662c3.0.tmp
/data/data/####/64e3d0a1ebfead443f863871f99662c3.1.tmp
/data/data/####/66a4cbea82cf49f9b47bd4c5b20f6320.0.tmp
/data/data/####/66a4cbea82cf49f9b47bd4c5b20f6320.1.tmp
/data/data/####/689d5f0551aaaef386ca83586ec75ac1.0.tmp
/data/data/####/689d5f0551aaaef386ca83586ec75ac1.1.tmp
/data/data/####/68f299ebc30384cb107762dd99bce6aa.0.tmp
/data/data/####/68f299ebc30384cb107762dd99bce6aa.1.tmp
/data/data/####/6c0951a1726f40ded52f2413e1d601ee3f8b5ef9e21d0f7....0.tmp
/data/data/####/6fd25334cd48cc124ecdf6d818b2a0d541fecb9a8c92935....0.tmp
/data/data/####/777ab77096ea36399257c17ffe3c42ef.0.tmp
/data/data/####/777ab77096ea36399257c17ffe3c42ef.1.tmp
/data/data/####/77f625fd09896801fff86bef09af4488.0.tmp
/data/data/####/77f625fd09896801fff86bef09af4488.1.tmp
/data/data/####/78ac8b311cf9c0d4557e52b453f0b454.0.tmp
/data/data/####/78ac8b311cf9c0d4557e52b453f0b454.1.tmp
/data/data/####/83a1ecd99f95b250608955d0308a12eb634e6ce4cc777d3....0.tmp
/data/data/####/83fcbf68addbc7860fb185e6e629c797.0.tmp
/data/data/####/83fcbf68addbc7860fb185e6e629c797.1.tmp
/data/data/####/862fac1ce18fce55c80afa5cac7ada13.0.tmp
/data/data/####/862fac1ce18fce55c80afa5cac7ada13.1.tmp
/data/data/####/8a7df0b8fa5637d8cd3497374393d522.0.tmp
/data/data/####/8a7df0b8fa5637d8cd3497374393d522.1.tmp
/data/data/####/8d0f45641632f7f61dea005b44895ba6.0.tmp
/data/data/####/8d0f45641632f7f61dea005b44895ba6.1.tmp
/data/data/####/9089b461f28613e9a9b76bf7631b02ce.0.tmp
/data/data/####/9089b461f28613e9a9b76bf7631b02ce.1.tmp
/data/data/####/95585722da5884489af72b8ef688e911.0.tmp
/data/data/####/95585722da5884489af72b8ef688e911.1.tmp
/data/data/####/961256293cc520950cb90c84a72063ea.0.tmp
/data/data/####/961256293cc520950cb90c84a72063ea.1.tmp
/data/data/####/97955a851c8b18b5b58257bd13fd90e8.0.tmp
/data/data/####/97955a851c8b18b5b58257bd13fd90e8.1.tmp
/data/data/####/97eedb090393800b96ca63d97f52de7d.0.tmp
/data/data/####/97eedb090393800b96ca63d97f52de7d.1.tmp
/data/data/####/9812f4ba54b3a8fbdec874080b6eeac7.0.tmp
/data/data/####/9812f4ba54b3a8fbdec874080b6eeac7.1.tmp
/data/data/####/99e6ac69b3a065b634537d2243e4b60e.0.tmp
/data/data/####/99e6ac69b3a065b634537d2243e4b60e.1.tmp
/data/data/####/9dde69cc11b7393cbdda2b70bbb69f3a2be8c19a050dfe9....0.tmp
/data/data/####/AIC-prefs.xml
/data/data/####/APPFIREWORKS.xml
/data/data/####/CookiePersistence.xml
/data/data/####/Terrarium-Sugar.db-journal
/data/data/####/TwitterAdvertisingInfoPreferences.xml
/data/data/####/WCkrbZuCQ
/data/data/####/a1ae1e8c9f84d1ad05199d0b46c472ed54ec73a8df06006....0.tmp
/data/data/####/a47869f1b71d9ee5d7c5023aa6b19537d051ba036acb956....0.tmp
/data/data/####/a8386f758e46cd515d52ecb60971a2dc.0.tmp
/data/data/####/a8386f758e46cd515d52ecb60971a2dc.1.tmp
/data/data/####/ae5646154e7b7caa30edd3e9e8b8380c.0.tmp
/data/data/####/ae5646154e7b7caa30edd3e9e8b8380c.1.tmp
/data/data/####/ae77008c2910e7708edb47326c152d54.0.tmp
/data/data/####/ae77008c2910e7708edb47326c152d54.1.tmp
/data/data/####/b126e81ddc450d3991a130df3831481f178a035922cf179....0.tmp
/data/data/####/b18dac183a72beabbf0daf47e12e93b0.0.tmp
/data/data/####/b18dac183a72beabbf0daf47e12e93b0.1.tmp
/data/data/####/b328f18d42fc2f9cdc511e88296c7c70.0.tmp
/data/data/####/b328f18d42fc2f9cdc511e88296c7c70.1.tmp
/data/data/####/b62ebd3e746d78b9b56394a22fc7b6c2.0.tmp
/data/data/####/b62ebd3e746d78b9b56394a22fc7b6c2.1.tmp
/data/data/####/b956706e2954c0946efc9b29f7dff214.0.tmp
/data/data/####/b956706e2954c0946efc9b29f7dff214.1.tmp
/data/data/####/bab86ad2db919b3173f38212bd599e3c.0.tmp
/data/data/####/bab86ad2db919b3173f38212bd599e3c.1.tmp
/data/data/####/bc0c07785194359a448d9573d5ed134d.0.tmp
/data/data/####/bc0c07785194359a448d9573d5ed134d.1.tmp
/data/data/####/bc438e229cf39b76161f5aa443a2d3a4.0.tmp
/data/data/####/bc438e229cf39b76161f5aa443a2d3a4.1.tmp
/data/data/####/bdc52e023300849105a35a782aeafe76569ebf3372d5b03....0.tmp
/data/data/####/be428db921e27229785031cb419191326e2e62abbee0c32....0.tmp
/data/data/####/c27051f6f0bb964c7ec5def2f7fa1db7f68f6fc1cdbba29....0.tmp
/data/data/####/c4658bffa6ee6acc82b1d3a973d093ac.0.tmp
/data/data/####/c4658bffa6ee6acc82b1d3a973d093ac.1.tmp
/data/data/####/c6f273cc0c6cea3addab4033fd8580c9438f146fec53830....0.tmp
/data/data/####/c9dad0f67dffe116e8e1a50036f6ebff.0.tmp
/data/data/####/c9dad0f67dffe116e8e1a50036f6ebff.1.tmp
/data/data/####/cbd0dd073d0de483ca8f24f1c8d2833dbb7b68a1b6a62a4....0.tmp
/data/data/####/cf22db3a102bb03e42c1c36edb968e9b.0.tmp
/data/data/####/cf22db3a102bb03e42c1c36edb968e9b.1.tmp
/data/data/####/cfa91c46aa9be233888398412cb450b7.0.tmp
/data/data/####/cfa91c46aa9be233888398412cb450b7.1.tmp
/data/data/####/com.crashlytics.prefs.xml
/data/data/####/com.crashlytics.sdk.android;answers;settings.xml
/data/data/####/com.crashlytics.settings.json
/data/data/####/com.google.android.gms.analytics.prefs.xml
/data/data/####/com.google.android.gms.appid-no-backup
/data/data/####/com.google.android.gms.appid.xml
/data/data/####/com.google.android.gms.measurement.prefs.xml
/data/data/####/com.livefront.bridge.BridgeDelegate.xml
/data/data/####/com.nitroxenon.terrarium-1.apk.classes-1295317714.zip
/data/data/####/com.nitroxenon.terrarium-1.apk.classes-690988051.zip
/data/data/####/com.nitroxenon.terrarium-1.apk.classes-778072518.zip
/data/data/####/com.nitroxenon.terrarium_boundentrypreferences.xml
/data/data/####/com.nitroxenon.terrarium_migrationpreferences.xml
/data/data/####/com.nitroxenon.terrarium_preferences.xml
/data/data/####/com.nitroxenon.terrarium_servertimeoffset.xml
/data/data/####/com.nitroxenon.terrarium_startupserviceinfopreferences.xml
/data/data/####/com.yandex.metrica.configuration.xml
/data/data/####/credentials.dat
/data/data/####/d0bcd6abbaeea8b610cf4baf4dc506cf.0.tmp
/data/data/####/d0bcd6abbaeea8b610cf4baf4dc506cf.1.tmp
/data/data/####/d14c6f6b787f9bef5547417b22791d99.0.tmp
/data/data/####/d14c6f6b787f9bef5547417b22791d99.1.tmp
/data/data/####/d220011ed88f565698cf988282664539.0.tmp
/data/data/####/d220011ed88f565698cf988282664539.1.tmp
/data/data/####/d47d89e666e509ac569614701375fc0d.0.tmp
/data/data/####/d47d89e666e509ac569614701375fc0d.1.tmp
/data/data/####/d492bf52a76767906baf0e464c9ca86083352ec229b5b13....0.tmp
/data/data/####/d8b32f6b341c69fa95b16df110962687.0.tmp
/data/data/####/d8b32f6b341c69fa95b16df110962687.1.tmp
/data/data/####/db_metrica_com.nitroxenon.terrarium_13-journal
/data/data/####/db_metrica_com.nitroxenon.terrarium_20799a27-fa...ournal
/data/data/####/db_metrica_com.nitroxenon.terrarium_f6fa2bbf-d8...ournal
/data/data/####/dcbe21d37012d282437157b439575e22.0.tmp
/data/data/####/dcbe21d37012d282437157b439575e22.1.tmp
/data/data/####/ddca9bf2bf42f8d753af2315e5a9b9bfab077cd88111e02....0.tmp
/data/data/####/dfaeb3014b10aa6f812f4e9f5112d815.0.tmp
/data/data/####/dfaeb3014b10aa6f812f4e9f5112d815.1.tmp
/data/data/####/e5cbdf9c42589bb5f707088a7ae88e83.0.tmp
/data/data/####/e5cbdf9c42589bb5f707088a7ae88e83.1.tmp
/data/data/####/e74c35a7d9be65fb942f042cc927382f.0.tmp
/data/data/####/e74c35a7d9be65fb942f042cc927382f.1.tmp
/data/data/####/e9f252d6c4d675d813b24c56035145a5.0.tmp
/data/data/####/e9f252d6c4d675d813b24c56035145a5.1.tmp
/data/data/####/e9f5be794606a6eff6efc68414616ab9.0.tmp
/data/data/####/e9f5be794606a6eff6efc68414616ab9.1.tmp
/data/data/####/eb4fd0b4508fc769996f513fe41a36b5b60516558d1265d....0.tmp
/data/data/####/ed4de360696e1a13036f5478e6747587.0.tmp
/data/data/####/ed4de360696e1a13036f5478e6747587.1.tmp
/data/data/####/evernote_jobs.db-journal
/data/data/####/evernote_jobs.xml
/data/data/####/f081fcbb0ced6acc4d3bc5835a4f741b.0.tmp
/data/data/####/f081fcbb0ced6acc4d3bc5835a4f741b.1.tmp
/data/data/####/f17cf969fd114f3f85cbeef8bdc57563.0.tmp
/data/data/####/f17cf969fd114f3f85cbeef8bdc57563.1.tmp
/data/data/####/fc45e41b77dd50515197f6429954e1f3b774c6699987066....0.tmp
/data/data/####/fd6ba3a1ee0efb111d315b02c1c6e263.0.tmp
/data/data/####/fd6ba3a1ee0efb111d315b02c1c6e263.1.tmp
/data/data/####/gaClientId
/data/data/####/google_analytics_v4.db-journal
/data/data/####/google_app_measurement_local.db
/data/data/####/google_app_measurement_local.db-journal
/data/data/####/initialization_marker
/data/data/####/io.fabric.sdk.android;fabric;io.fabric.sdk.andr...ng.xml
/data/data/####/journal.tmp
/data/data/####/metrica_client_data.db
/data/data/####/metrica_client_data.db-journal
/data/data/####/metrica_client_data.db.lock
/data/data/####/metrica_data.db-journal
/data/data/####/multidex.version.xml
/data/data/####/oneaudience.xml
/data/data/####/persisted_config
/data/data/####/registry
/data/data/####/sa_80ebf28f-3293-4c61-a08f-6466df79d801_1523905089661.tap
/data/data/####/sa_943adbf3-13ee-4364-b0db-64f7cc2114d8_1523905087925.tap
/data/data/####/sa_c88fdeba-e535-4671-90b2-5997b53b0879_1523905093178.tap
/data/data/####/session_analytics.tap
/data/data/####/session_analytics.tap.tmp
/data/data/####/terrarium.dat.jar
/data/data/####/tmdb-1402.0.tmp
/data/data/####/tmdb-1403.0.tmp
/data/data/####/tmdb-1407.0.tmp
/data/data/####/tmdb-1412.0.tmp
/data/data/####/tmdb-1416.0.tmp
/data/data/####/tmdb-1418.0.tmp
/data/data/####/tmdb-1622.0.tmp
/data/data/####/tmdb-456.0.tmp
/data/data/####/tmdb-48891.0.tmp
/data/data/####/tmdb-60573.0.tmp
/data/data/####/tmdb-60585.0.tmp
/data/data/####/tmdb-60694.0.tmp
/data/data/####/tmdb-60708.0.tmp
/data/data/####/tmdb-61888.0.tmp
/data/data/####/tmdb-62286.0.tmp
/data/data/####/tmdb-62852.0.tmp
/data/data/####/tmdb-63174.0.tmp
/data/data/####/tmdb-66786.0.tmp
/data/data/####/tmdb-75191.0.tmp
/data/data/####/tmdb-75758.0.tmp
/data/data/####/webview.db-journal
/data/media/####/.nomedia

Miscellaneous:

Loads the following dynamic libraries:

WCkrbZuCQ
duktape

Uses the following algorithms to encrypt data:

AES-ECB-PKCS5Padding
RSA-ECB-OAEPWithSHA1AndMGF1Padding

Uses the following algorithms to decrypt data:

AES-ECB-PKCS5Padding

Uses administrator priveleges.

Gains access to geolocation.

Gains access to network information.

Gains access to telephone information (number, imei, etc.).

Gains access to information about installed applications.

Gains access to information about accounts (Google, Facebook, etc.) registered on the device.

Adds tasks to the system scheduler.

Displays its own windows over windows of other applications.

Technologies

Begriffe

Schulung und Training

Mythen

Technical information

Curing recommendations

Free trial